cveboard RSS feed

CVE-2021-40829

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2021
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

TLS hostname validation issues within AWS IoT Device SDKs on macOS

Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.4.2), Python (versions prior to 1.6.1), C++ (versions prior to 1.12.7) and Node.js (versions prior to 1.5.3) did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities (CA) in their trust stores on MacOS. This issue has been addressed in aws-c-io submodule versions 0.10.5 onward. This issue affects: Amazon Web Services AWS IoT Device SDK v2 for Java versions prior to 1.4.2 on macOS. Amazon Web Services AWS IoT Device SDK v2 for Python versions prior to 1.6.1 on macOS. Amazon Web Services AWS IoT Device SDK v2 for C++ versions prior to 1.12.7 on macOS. Amazon Web Services AWS IoT Device SDK v2 for Node.js versions prior to 1.5.3 on macOS. Amazon Web Services AWS-C-IO 0.10.4 on macOS.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

AWS IoT Device SDK v2 for Java

Vendor
Amazon Web Services
Product
AWS IoT Device SDK v2 for Java
Platforms
  • macOS
Default status
Unknown
AWS IoT Device SDK v2 for Java · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom1.4.2UnavailableNone listed

AWS IoT Device SDK v2 for Python

Vendor
Amazon Web Services
Product
AWS IoT Device SDK v2 for Python
Platforms
  • macOS
Default status
Unknown
AWS IoT Device SDK v2 for Python · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom1.6.1UnavailableNone listed

AWS IoT Device SDK v2 for C++

Vendor
Amazon Web Services
Product
AWS IoT Device SDK v2 for C++
Platforms
  • macOS
Default status
Unknown
AWS IoT Device SDK v2 for C++ · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom1.12.7UnavailableNone listed

AWS IoT Device SDK v2 for Node.js

Vendor
Amazon Web Services
Product
AWS IoT Device SDK v2 for Node.js
Platforms
  • macOS
Default status
Unknown
AWS IoT Device SDK v2 for Node.js · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom1.5.3UnavailableNone listed

AWS-C-IO

Vendor
Amazon Web Services
Product
AWS-C-IO
Platforms
  • macOS
Default status
Unknown
AWS-C-IO · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom0.10.4UnavailableNone listed